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AMENDMENTS TO THE SPECIFICATION: 

Please replace the paragraph beginning on page 10, line 10, and ending on 
line 14 with the following amended paragraph: 

Returning again to Figure 2, in block 260, ticket server 130 transmits the 
ticket, including the summary of associated c lie nts events to the client. As 
discussed below, a client handling system may operate between the ticket server 
and the actual client. In which case, ticket server 130 should transmit the ticket to 
the client through the client handling system. 

Please replace the paragraph beginning on page 12, line 13, and ending on 
line 17 with the following amended paragraph: 

In block 525, a refresh request is received. Refreshing involves changing 
keys after a certain duration. Refreshing, also referred to as re-keying, s e v e rs 
serves at least two purposes. First, for cryptographic reasons, it is a good idea to 
change keys from time to time. The longer a key is used, the more likely it is that 
someone will be able to crack the key and access the event without authorization. 
The more often keys are changed, the better the security. 

Please replace the paragraph beginning on page 13, line 6, and ending on 
line 13 with the following amended paragraph: 

As illustrated in Figure 6, the event interval 630 is also the forward security 
window for the next event interval 630. That is, while the client is sending or 
receiving content using the current key during the current event interval, the client 
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also accesses the key server during the forward security window to get the next 
refresh key. In alternate embodiments, the event interval and the forward security 
window do not exactly coincide. That is, the forward security window may be shorter 
or longer than the event interval, and the client may retrieve keys from the key 
server more than one event i nterna l interval in advance. 

Please replace the paragraph beginning on page 21, line 7, and ending on 
line 9 with the following amended paragraph: 

If the selector is not successfully created in block 1230, the data is prevented 
far from going further in block 1280. This may happen where certain selector fields 
are detected in the data, but the data within those fields has been corrupted. 

Please replace the paragraph beginning on page 22, line 21, and ending on 
page 23, line 2 with the following amended paragraph: 

Where the security agent of Figures 12 and/or 13 is used in combination with 
the networking environment of Figure 1 , the database of selector / security 
association pairs is populated by a client when the client acc e ss accesses key 
server 140 and receives keying information. 

Please replace the paragraph beginning on page 24, line 17, and ending on 
page 25, line 2 with the following amended paragraph: 

In alternate embodiments, the present invention is implemented in discrete 
hardware or firmware. For example, one or more application specific integrated 
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circuits (ASICs) could be programmed with the above described functions of the 
present invention. In another example, the present invention could be implemented 
in one or more ASICs on additional circuit boards and the circuit boards could be 
inserted into the computer(s) described above. In another example, tield 
programmable gate arrays (FPGAs) or static programmable gate arrays (SPGA) 
could be used to implement the present invention. In yet another example, a 
combination of of hardware and software could be used to implement the present 
invention. 
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